AUTOM8LABS | MCP Connector for Revit

What it does

A Revit add-in that lets your existing AI assistant read and edit the model that is open on the user's machine. You bring your own AI subscription. Supported on Revit 2022 to 2027.

Where model data goes

To whichever AI provider you already use, under your existing contract with that provider. AUTOM8LABS never receives your model data, never stores it, and is not a processor of it.

The add-in runs inside Revit on the workstation. The component that talks to your AI client has no third-party dependencies and makes no outbound network connections of its own.

What AUTOM8LABS receives

Version check	Product name and version number. No user identifier, no machine identifier, no licence key.
Licence activation and validation	Licence key, a hashed machine identifier, the Windows machine name, and the version number. Installs with no licence make no licence-related connection at all.

The machine identifier is a SHA-256 hash of hardware values. The underlying hardware identifiers never leave the machine.

What is stored

Model content	Never received or stored
File names and paths	Never received or stored
Licence records	Licence key, hashed machine identifier, machine name and client version. Held for the duration of the licence and deleted on request
Payment records	Stripe for website purchases, Autodesk for store purchases. AUTOM8LABS does not store card data

On the workstation

No listening port. The add-in communicates with your AI client over a Windows named pipe, not a network socket.
Access restricted to the same Windows user. The pipe carries a single access control entry, for the account Revit is running under. If that account cannot be resolved, no pipe is created.
No log file by default. Diagnostics are off unless a user enables them for troubleshooting. When enabled, the log records tool requests, which can include model file paths and element identifiers, and it never leaves the machine.
Stored credentials are encrypted. The licence and entitlement caches are protected with Windows DPAPI.
No elevated privileges are required at runtime.

Supply chain

All third-party components are widely used libraries from the official NuGet ecosystem. Every component declares a licence. All are MIT except one, which is Apache-2.0. There are no copyleft licences in the shipped product.

A CycloneDX Software Bill of Materials is produced for each supported Revit version, because the dependency set differs between them. At version 3.6.2 no shipped component carries a known vulnerability, and the build fails if that stops being true.

SBOMs are available on request from security@autom8labs.io.

Assurance

Every binary and installer is code-signed as AUTOM8LABS LTD through Azure Trusted Signing.

See the Trust Center for the full assurance position and the sub-processor list.